NetApp services may not be reachable by clients when run through IBM Java due to missing cipher suites
Applies to
All Version of :
- SnapCenter Plug-in Creator
- SnapCenter Plug-in for Oracle (SCO)
- SnapCenter Plug-in for SAP HANA (SCHANA)
- SnapCenter Plug-in for UNIX (SCU)
- SnapCreator Framework (SCF) 3.4
Issue
Error message in browser with Snap Creator or in client logs:
ERR_SSL_PROTOCOL_ERROR
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
SSL_ERROR_NO_CIPHER_OVERLAP
The Host entry in the SnapCenter GUI shows "Services stopped", the SMCore_<JOB>.log
from the installation job logs download, would show:
Error in invoking SCC RestEndpoint EnablePlugin : Plug-in host service is not available.
Run 'systemctl start scc' on the host machine to start the host service.
Check if the Plugin Service is down or not reachable.
and the /var/log/snapcenter/spl/logs/spl_0.log
shows:
Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
at com.ibm.jsse2.g.a(g.java:58)
at com.ibm.jsse2.g.a(g.java:4)
at com.ibm.jsse2.ba.a(ba.java:221)
at com.ibm.jsse2.g$c.consume(g$c.java:19)
at com.ibm.jsse2.ba.a(ba.java:195)
at com.ibm.jsse2.aZ.a(aZ.java:36)
at com.ibm.jsse2.bi.b(bi.java:219)
at com.ibm.jsse2.bi.f(bi.java:317)
at com.ibm.jsse2.bi.a(bi.java:218)
at com.ibm.jsse2.bi.startHandshake(bi.java:212)